Back to skill
Skillv1.0.0

VirusTotal security

Backend Developer · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:36 AM
Hash
dc8da4c886afca186a8e316913cc46ac6e5d84fdf5abb18b26fe508f02479ae3
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: langchain-email-agent Version: 1.0.0 The skill is designed to compose and send emails using an AI agent. While it accepts user-provided instructions that could be a vector for prompt injection, the critical safeguard is the `humanInTheLoopMiddleware` applied to the `EmailTool` in `email.agent.ts`. This middleware explicitly requires human approval (approve, edit, or reject) before any email is sent, effectively preventing unauthorized email sending or data exfiltration via email, even if the AI agent is compromised by prompt injection. The `SKILL.md` clearly documents this human-in-the-loop process.
External report
View on VirusTotal